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ABSTRACT 


This report summarizes the results of a brief assessment of 
Automatic Data Processing (ADP) activities within the Intelli- 
gence Community (IC), to identify promising avenues for future 
improvements. 


Users needs and commonality between hardware and software sys- 
tems are reviewed, and some alternative concepts are presented 
for data base Management systems. Finally, policy and techni- 
cal issues are identified together with means for achieving a 
Community-wide information system. 
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SUMMARY 


The rapid growth of the Intelligence Community anc the 
orders of magnitude expansion of Automatic Data Processing w:ith- 
in elements of the IC have promoted decentralized planning ar 
management of software and hardware systems and data bases. 

Many of these systems have common characteristics, and in thet 
sense are duplicative. It is believed that these represent c5- 
portunities for improved efficiency and cost saving. 


For example, the prevalent IC ADP systems perform commeni- 
cation, collection, processing and production functions. ‘Soe 
of these systems possess the characteristics of data base mar - 
agement systems (DBMS), and are therefore considered amenapie 
to some consolidation, commonality and Community-wide accessing. 
The CIA SAFE and DIA ADISS Systems fall into this general cate- 
gory; in addition, 6 other major systems of this type were guick- 
ly identified in this brief overview, and we understand that there 
may be 30 such IC systems allitold. Hence the current Ccngres- 
sional interest in SAFE/ADISS may in fact only be focused on the 
tip of the iceberg! 


This paper presents a few alternative concepts for deve i- 
oping broader based, Community-wide DBMS, merely to iliustrate 
approaches and associated advantages/disadvantages of each. Je- 
tailed cost-benefit analyses are needed to home in on systemis) 
that smoothly transition from the maze that exists today, te 
more efficient, centralized solutions for the future. These 
analyses should be part of an organized effort which addresses 
the feasibility and value of adopting or developing a Community 
standard data base management system. This effort also exterds 
beyond the SAFE/ADISS question, because with time the existinz 
"home grown'' DBMS will be outdated technically and wil! recuire 
updating and replacement. 


Fundamental to achieving Community-wide systems is the 
resolution of a family of policy and technical issues which are 
complex, and have mostly been treated piecemeal in the past. 
These relate to sharing data bases; agency access; tecinical 
data standards and languages; interfaces and security. Sp+#cti:- 
ics are discussed in Section IV. 


Li 
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An area of immediate concern to the DCI is a timely 4c 
well thought out response to the Senate Select Committee on i 1- 
telligence. However, this response is only a subset of broader 
questions of Community-wide structuring, integration, plannin. 
and management. The SSCI presentation can be viewed as a i#a>- 
frogging opportunity to generate an agreed-upon roadmap for 
short-, medium-, and long-range IC ADP planning. For exampte. 
creating a centralized management structure would be an ear est 
of the DCI's intent to provide positive control over future 
planning and utilization of Community ADP resources. 


Regretably, resources on hand at the IC Staff level sopear 
woefully inadequate for the SSCI effort and certainly fer any 
broad Community planning function. Some specific steps need to 
be undertaken, perhaps providing some help for handling the most 
immediate problems, followed by creation of a new, higher level 
management mechanism to address longer term ADP integration, 
technical, budgeting and planning functions. 
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I. INTRODUCTION 


1.1 This report summarizes the results of a brief assessmeni 
of Automatic Data Processing (ADP) activities within the Inte: - 
ligence Community (IC). The work was performed for the Director 
of Central Intelligence under Task No. 4 of Contract 100400. 


BACKGROUND 


1.2 The Intelligence Community utilizes automatic data proces- 
sing systems extensively to collect, process and produce National 
Intelligence.- In the past, each organization in the Community 
has independently planned, managed, and budgeted for data prcces- 
sing related activities and computer hardware generally without 
regard to the needs or existing capabilities of the Community as 
a whole. The evolution of ADP and telecommunications within the 
Community has resulted in the development of many different com- 
puter software systems, some of which have duplicative charac- 
teristics and most of which are nonstandardized. This histcrical 
lack of centralized ADP management leadership and planning has 
resulted in the following: 


e Duplication of technical efforts, which have 
partially resulted from the rapid growth of 
ADP in the Community 


e Limited and questionable accountability for 


resource expenditures {no effective ADP cost 


or utilization/analysis) 
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e Limited Community planning for system inter- 
faces with only some interoperability and 
interconnectivity between systems 


e Lack of effective Community standards for 
security, data elements and files, and sys- 
tem performance (despite efforts of the In- 
formation Handling Committee formed to pro- 
mulgate standards) 


@e Proliferation of diverse computer hardware, 
line protocols, and user terminals. 


1.3 Recognizing these deficiencies, the Director of Central 
Intelligence in the "National Foreign Intelligence Program 
(NFIP) and Resource Guidance: FY 79-83" has expressed his deter- 
mination that Automatic Data Processing and Telecommunications 
are major issues that must be dealt with from a total Community 
point of view. Other government organizations have made similar 
observations: the Senate Select Committee on Intelligence re- 
port of 19 May 1977 noted ADP resource activities need more 
careful coordination, direction, and interagency planning; the 
House Appropriations Committee report of 21 June 1977 was criti- 
cal of the planned expenditures of fiscal resources for agency 
systems (CIA SAFE and DIA ADISS); and the Director of the Office 
of Manpower and Budget stated that the Intelligence Community 
should develop a coordinated approach to the development of com- 
puterized data bases that maximizes the rapid and free flow of 
information vital to the quality and timeliness of the intelli- 
gence product and minimizes the duplication in both data files 
and ADP equipment. 


2 
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1.4 More specifically, the SSCI requested that DCI prepare a 
comprehensive report and long-range plan for coordinated acqui- 
sition and utilization of IC ADP resources by November 1977. 
Types of detailed information requested include trend data and 
analysis of ADP costs from FY 70 - 79 by agency; identification 
and description of computer assets and use; near-term replace - 
ments or upgrades; identification of data files and interagency 
exchange; projected major problems, priorities and new initia- 
tives, and a broad organizational plan directed at improving 
coordination of ADP hardware acquisition, software and data base 
development, and interagency data base access. Efforts are cur- 
rently underway in IC Staff and DoD to generate inputs for the 
DCI response. (As an independent observation, it is believed 
that the Information Handling Division of the IC Staff which is 
responsible for the DCI response, including development of a 
Community-wide plan, is totally understaffed for responsibilities 
of this magnitude at only four persons.) 


OBJECTIVES AND SCOPE 


L,5 The objectives of this study are to identify areas of com- 
monality in present or contemplated Intelligence Community AI’P 
utilization and potential avenues for avoiding or eliminating 
duplication, as inputs for future planning. 


1.6 The scope of the project was intentionally broad to incor- 
porate the Community as a whole with the depth limited to what 
might be accomplished with about 1 man-month of research effort. 
Hence the emphasis was on developing an overview of Community 
ADP usage, rather than in-depth analyses of specific problem 
areas. The approach used to gather information for this report 
involved reviewing written material and interviewing individuals 


within the Community. 
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CONTENTS 


bara The next section of the report reviews user needs and com- 
monality between ADP systems. Section III discusses some alter- 
native concepts for data base management systems, and the last 

section examines some relevant issues for achieving a Community - 


wide information system. 
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II. USER NEEDS AND COMMONALITY 


MARKET 


Z2.1 The rapid growth of the Intelligence Community has contrib- 
~ uted to the duplicative and nonstandardized nature of ADP acSTAiHNTL 
ties within the Community. 1/ The total fiscal funding for ADP 


- 

= search and experimentation. = 

- bad The volume of available information within the Community 
is rapidly increasing. Advanced collection systems have exzo- 

a nentially increased the availability of information. To effec- 
tively handle this information, technology must be exploited <o 

ia ensure the analyst can access, extract, manipulate and output 
data requested in a timely manner. The Defense Communication 

sy Agency has developed a projection for the level of transmission 
of data on AUTODIN II. This projection, displayed in Figure 2.1, 
indicates the magnitude of the increasing exchange of Community 

= information--a fifty-fold increase in the period '72 to '76, and 

“as detSiskn Mme. wets 
i/ The number of intelligence organizations has increased from 

3 (FBI, Army's G-2, and Office of Naval Intelligence) in 1941 
- to over 20 today. 
STATINTL 2), 


The Information Handling Committee's budget used for Com- 


_ ea ee and experimentation is less than 


a 
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PROJECTED DAILY DEFENSE COMMUNICATION SUPPORT 
FOR DATA TRAFFIC* 


AUTODIN II," Proceedings of Department 
formation System Managers Conference, 


eptember 
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another twenty-fold jump by 1984, with accompanying growth in the 
numbers of terminals and computers. 


ADP SOFTWARE SYSTEM COMMONALITY 


235 Categories of software systems were examined to identify a 
select group of ADP software systems with commonality among Com- 
munity organizations. This cursory look at systems with duplica- 
tive characteristics centered around systems with characteristics 
of data-base-management-systems (DBMS). Table 2.1 lists systems 
that were identified and categorized according to: collection 
systems (of which only imagery systems were reviewed); communica- 
tions systems; processing systems; and production systems. The 
processing and production categories contained the systems with 
data-base-management-like characteristics. 


2.4 Because of satellite costs and the relatively short time 
frame during which computerized imagery has existed, the imagery 
collection systems have evolved, for the most part, to fulfill 
specific Community needs. Communication systems (networks) al- 
ready involve a large number of Community users. Table 2.2 pro- 
vides a brief description of imagery collection and communications 
systems. 


ou A more suitable target for this analysis is the prolifera- 
tion of similar data base management systems within the proces- 
sing and production categories. Table 2.3 provides a brief de- 
scription of systems that are in the processing and production 
categories that potentially possess duplicative characteristics. 
While this list may include all types of systems, it probably 
represents only a fraction of the total number of systems. 
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DBMS USER REQUIREMENTS 


2.6 By reviewing system literature and documentation, a list 

of user requirements partly common to these DBMS systems was 
constructed. This list, with refinement, could be used to iden- 
tify the characteristics of a standard Community DBMS. If stan- 
dard DBMS's could be developed or adapted to fulfill user re- 
quirements, potential savings would result by not proliferating 
new systems. Table 2.4 contains a description of user functicnal 
requirements, summarizing the capabilities provided by ail of the 


systems described in Table 2.3. 
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TABLE 2. 4 
USER FUNCTIONAL REQUIREMENTS 


DATA MANIPULATION 
Search (indexed or free text) 


— Retrieve (browse, keyword, text, content analysis) 


Hold 
- Edit 
Output 


| 


- Print 
—- Alert 

FILE SUPPORT FUNCTIONS 
— Maintain (create, change, delete, replace, add) 


— Compose (page, scroll, insert, change, delete, move, 


print) 


— Storage, retrieval, and execution of past search 


strategies 
COMPUTATIONAL FUNCTIONS 


| 


APL, LISP, FORTRAN 


Statistical functions 


I 


Curve fitting 
Mensuration and isometrics 
Models (heuristic, econometric, simulation) 


COMMUNICATIONS FUNCTIONS 


— Route (files and messages) 
—- Alert 


USER AIDS 


— Computer aided instruction 
— Help function 
~- Diagnostics and error messages 
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III. SOME ALTERNATIVE DATA BASE MANAGEMENT 
SYSTEM CONCEPTS 


STANDARD DBMS 


3.1 SAFE of the CIA and ADISS of the DIA are two systems he:ng 
planned that are currently receiving major attention and discus- 
sion. From the relevant literature prepared for these two sys- 
tems (although ADISS does not have user requirements completelv 
defined), it appears that the two systems have a number of sten- 
dard DBMS characteristics. This is alarming since several other 
Systems, identified in Table 2.3, also have standard DBMS char- 
acteristics, and the table contains only a small number of highly 
visible DBMS systems. The COINS Project Office estimates that 
there are more than 30 DBMS-like Systems operational in the Com- 
munity today. Many of these systems are "home-grown" and will 
eventually come up for replacement as the state-of-the-art 
advances. 


he: The issue then becomes obvious. First, does the Community 
need all of these DBMS systems, and second, can a Community stan- 
dard be developed or adapted and implemented? It is believed 

that the Community does not need all of these different DBMS svs- 
tems. Organizations typically argue that their applications are 
unique--when in fact they are not. The feasibility of a Community 
standard for a DBMS or a set of DBMS systems is worthwhile inves- 
tigating. 


3.3 The Department of Commerce has on several occasions spon - 
sored a Conference of Data Systems Language (CODASYL) and this 
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organization has been active in the development of a common lata 
Description Language. Before additional retrieval languages are 
developed within the Community and the magnitude of the ADF con- 
monality/multiple language problem increases, the adaptation of 
CODASYL-like standards should be investigated. 


3.4 Ten years ago there were only a handful of specialized 
retrieval languages, usually only suited for one type of hard- 
ware. Today there are many "good" data base management systems 
and retrieval languages. Before another DBMS system like SAF# 
or ADISS is developed, "off-the-shelf" DBMS systems should be 
investigated. There may’be a Significant opportunity to reduce 
costs by building on these languages and modifying only part of 


the existing larger DBMS systems. In developing or adapting new 
DBMS systems, it is clear that the Community does not need the 
following: 
e Unique, inflexible and application-oriented 
data base systems that are limited to nar- 
row functional use 
° Procedures that are oriented toward ADP- 
inclined personnel 
e Language not optimally designed for non- 
ADP-trained analysts 
e Unique DBMS applicable only to one or two 


types of hardware. 
ALTERNATIVE SYSTEM CONCEPTS 
S65 Some alternative conceptual designs for both the networking 


of the hardware and the software interface are examined briefiy 
below. Axiomatic to this investigation is the belief that a 
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"single united communications network" and a ''common language to 
access information" has the potential of contributing signifi- 
cantly to Community efficiency and effectiveness. 


Network Alternatives 


3.6 There are at least three network alternatives that should 
be considered, AUTODIN II, COINS, and IDHSC. A comprehensive 
evaluation of these three network alternatives is beyond the 
scope of this discussion, but the following summarizes status 
and capabilities. 


3 AUTODIN II. Time estimates place the opera- 
tion of this network in the CY 82-84 time 
frame. The network will continue to be sup- 
ported by Defense Communication Agency (DCA) 
when it is operational. Since this network 
is 6 to 8 yr from estimated completion, we 
can only consider this alternative for the 
future. However, current design compatibility 
should be established to ensure that AUTODIN II 
can be used when it becomes operational. 


e COINS. The COINS I network is presently 
operational, while COINS II is currently 
being tested. COINS II will use the com- 
munication technology developed in the ARPA 
network, which could provide for secure com- 
munication on common carrier lines. COINS 
has made tremendous strides in providing in- 
telligence analysts with a means to transfer 
and communicate information on a world-wide 
basis by linking to IDHSC. A wealth of ex- 
perience exists both in the knowlege of 
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technical staff and the management staff. 
The COINS Project Management Office (PMO) 
is impressive in its forethought, experi- 
mentation, and thorough investigation of 
alternatives. 


e IDHSC. The Intelligence Data Handling Sys- 
tem Communication or the Worldwide Intelli- 
gence Communications System (WICS) provides 
DODITS and COINS users with worldwide com- 
munications. This DIA snonsored network 
currently supports DIAOLS (DIA's data base 
management system). COINS and WICS II have 
been coordinated on a technical basis, but 
there are still major incompatibilities in 
the communication technology used by each. 
One problem claimed by IDHSC to have been 
resolved is the massive interfacing required 
with CIA, NSA, State, etc. 


Sar The two alternative network technologies for near-term use 
appear to be COINS and IDHSC, since the time estimate for AUTO- 
DIN II operation is CY 82-84. From this limited analysis, 

COINS II technology appears the most promising candidate for a 
near-term solution to a single communication network, if the 
COINS II tests are successful. The duplicative characteristics 
of COINS and IDHSC require that both be carefully evaluated to 
ascertain whether both networks are iustified. 


Multiple Language Problem 


308 Alternative conceptual system (hardware and software) de- 
Signs can be identified regardless of the decision to use COINS, 
IDHSC, or some other third undetermined network alternative. 
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But the experience and "lessons learned" in COINS and IDHSC 
should be used as a basis for long-term improvements in informa- 


tion handling and processing. 


549 The changing economics of hardware, the outlook for data 
transmission, and the large volume of data contained within tre 
worldwide intelligence community combine to suggest distributed 
system architecture. Distributed data base systems are attrat~ 
tive where data are generated at several locations and are needed 
there for further processing, yet some applications require data 
stored at other locations as well. Distributed data base systems 
provide the ability for parts of Community data to be managed by 
several processors and provide the analyst with the ability to 
view data from a single location and not be concerned about tie 
geographical location of the data. COINS II and IDHSC are being 
designed using the distributed data base concept. Figure 3.1 
conceptually displays the COINS hardware network. 


3.10 There are technical problems associated with distributed 
systems that may be significant ("lockout" and ''deadlock") and 
these issues will require a detailed knowledge of the hardware 
at each system node. Using the distributed data base concept, 
a few alternatives are identified below as means for establish- 


ing a common language to access information. 


3.11 The multiple language problems currently facing COINS 11 
or the DODIIS/IDHSC network are displayed in Figure 3.2. A user 
enters his information requests/commands via a computer terminal. 
That terminal is connected to computer hardware at location A. 
If the data requested is resident at Location "A," then DBMS | 
is used to access the data files. But, if the user wants to ac~ 
cess files at location "B,", then DBMS II must be used to access 
data files. This multiple language problem is compounded each 
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time a new node is added with a different language (some agen 
cies have multiple languages). 


Alternative 1: Standard DBMS 


3.12 One alternative for solving this problem is to replace all 
data base management languages with a Community standard DBMS 
language. Figure 3.3 displays a conceptual view of this alterna- 
tive. . 


3.13 The advantages and disadvantages of this approach are 
listed below. 


Advantages Disadvantages 


1. Standard DBMS 
2. Single language 


Costly solution 
Long conversion time likely 


3. File sharing and processing Drain on personnel resources 


possible Bound to one DBMS architecture 


wn Fe WNW NF 


Major impact on users 
Alternative 2: Centralize Community Files 


3.14 Another alternative for solving this problem is to central- 
ize all Community files at one node of the network (probably us- 
ing current hardware). Figure 35.4 displays a conceptual view of 
this alternative, whose advantages and disadvantages are described 


below. 


Advantages Disadvantages 
1. Community standard DBMS 1. Provide single failure point 
Maximum of two languages 2. Duplicate files 
3. Centralized management 3. Added file conversion and 
control maintenance 


4, Large file size 
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FIGURE 3.2 


Use OF MULTIPLE LANGUAGES With Cord 4h 
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FIGURE 3.3 
ALTERNATIVE 1: STANDARD DBMS 
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FIGURE 3.4 
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Alternative 3: Multiple Language Translator 


°3.15 A third alternative for solving the multiple language prob- 


lem is to develop a multiple language translator. This alterna- 
tive, displayed in Figure 3.5, would allow the user to use cur- 

rent node DBMS language as the standard Community language. Ad- 
vantages and disadvantages are described below. 


Advantages Disadvantages 
1. Minimal impact on users 1. Needs multiple language transla- 


Single Community user tion packages (potential risk?) 


language 2. Difficult to maintain individ- 
ual translation packages fcr 


3. Minimal conversion costs, 
each vendor 


if no existing files need 


to be converted 3. Additional personnel required 
to maintain translation pack- 
ages 


Alternative 4: Multiple Language Translator and Standard DBMS 


3.16 This is the last alternative that is presented, although a 
continuum of alternatives is possible, 2 Essentially, there is 
a combination of alternatives 1 and 3, which seems particularly 
relevant in light of the recent SAFE/ADISS interest and discus- 
sion. As part of the development of SAFE/ADISS, a user language 
must be defined. The characteristics and attributes of the defi- 
nition of this language could be used to create a multiple lan- 


1/ 


For a more detailed description of alternatives to the 
multiple language problem (without regard to SAFE/ADISS), 


see a "Study of Multi-Language Problems in COINS," May 
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guage translation package. The actual development of SAFE/AI:ISS 
could be directed to the needs of the entire Community and would 
result in the development of a standard DBMS. 


3.17 The advantages and disadvantages of this approach are 
described below. 


Advantages Disadvantages 
Single Community language 1. Multiple language translation 
Community standard DBMS packages must be developec 
that could be phased in 2. Maintenance would be difficult 
over time and serve as for translation packages, but 
DBMS for SAFE/ADISS would phase out over time 
3. Minimal conversion costs 3. Additional personnel may te 


required to maintain transla- 


Minimal impact on : 
P EOtte tion packages 


5. File sharing and proces- 4 


sing possible Bound to one DBMS architecture 


Requires strong, central man- 
agement control 


Summary 


3.18 The selection of an approach to solve the multiple language 
and DBMS problem presents a challenge in achieving a reasonatle 
balance between the expected user benefits and associated costs. 
Therefore, to perform a comprehensive evaluation of the alter- 
natives presented in this section or any others, the costs ard 
implementation schedule associated with each alternative must be 
developed in detail. However, certain relevant observations can 
be made. There are a large number of DBMS-like systems within 
the Commuinity, and these systems will eventually come up for 
replacement as the state-of-the-art advances. SAFE and ADISS 
may well be part of what will be a continuing trend to upgrace 
and replace obsolete "home grown" DBMS systems. As a result, 
alternative 4 (Multiple Language Translator and a Standard DEMS) 
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appears to be an attractive compromise because this alternative 
provides a means to move toward a Community standard while min- 
imizing the impact of change, and eventually evolving toward a 
standard. However, to refine this approach, in-depth cost/ben- 
efit analyses should be performed for these and other possible 
alternatives. This effort should identify and describe the spe- 
cific characteristics of the DBMS system and resident hardware 
as well as describe the costs and benefits associated with each 
alternative. 
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IV. COMMUNITY-WIDE INFORMATION SYSTEMS 


4.1 Community data, that is, intelligence data needed by more 
than one organization, is a reality. The set of complex policies 
and technical problems accompanying this reality must be deter- 
mined to establish an efficient and effective manner by which to 
communicate and transfer data within the Community. The concept 
of Community data has been demonstrated in the Community On-line 
Intelligence System (COINS), a Community test-bed system that 
links NSA, CIA, DIA, NPIC, and State, and which can be accessed 
by world-wide commands. This system currently provides service 
for 9,000 queries per month on over 65 files. Also, the Depart- 
ment of Defense Intelligence Information System (DODIIS), an 
evolving DoD Community system, has demonstrated the concept of 
Community data by providing for the exchange of information on 
part of over 175 files contained within DODIIS. In fact, 86 bil- 
lion characters of automated intelligence information (enough for 
300 complete sets of Encyclopedia Britannica) are exchanged an- 
nually within DODIIS alone. i/ 


4.2 Potential cost justification for Community information sys- 
tems has been demonstrated by COINS. Over 100 million communica- 
tion transmissions were saved annually in COINS by eliminating 13 
NSA reports, most of which were daily or weekly publications. 
However, this is only a small step in the cost savings that could 
be realized by the Community. The fact that there are software 
systems within the Community that have duplicative capabilities 


i/ High, Paul L., Jr., "DoD Automated Intelligence Flow," Pro- 
ceedings of Department of Defense Intelligence Information 
System Managers Conference, 26-30 September 1976. 
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and that fewer systems could potentially serve the Community 
provides a basis for significant future cost savings. 


MAJOR POLICY QUESTIONS 


4.3 To lend perspective to the larger problem of coordinazing 
and integrating the ADP planning elements within the Community 
for the development of a more accessible Community information 
system, it is important to understand the areas in which policy 
must be defined for Community ADP activities. For the purpose 
of the overview, we have identified the following seven areas 


e Shared data bases 


e Multiple retrieval languages and data base 
management systems 


e Data standards 

) Communication network interfaces 
e Training and user aids 

e Research and experimentation 

e Security 


Table 4.1 describes specific issues and some alternative ap- 
proaches associated with each area of major policy. Each of 
these policy questions is complex and has been addressed to some 
extent over the past several years by IHC and special subcommit- 
tees and study groups. It is believed that to achieve signifi- 
cant benefits of Community-wide efficiency and effectiveness via 
commonality will require "reasonable" resolution of all of these 
thorny policy (and related technical) questions. 
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TABLE 4.1 
OVERVIEW OF MAJOR POLICY QUESTIONS 


Specific Issues Alternative Approaches 
Budget Responsibilities: What organi- Host computer facility 
Zation 158 responsible for budgeting 


Proponent of data base 
for Community use of data files and Shared with users on a proportionate 
validating the cost/benefit of Com- 


use basis 


Policy Areas 


munity data file? e Information Handling Committee (IHC) 
Shared |e Community Council (new organization) 
data bases Access § Control Responsibilities: e IC staff 
What organization 15 responsible e IHC 
for ensuring authorized access? e Proponent of data base 
e Other group 
Quality § Timeliness of Date What e Proponent of data base 
ensures the accuracy, quality and e THC 
timeliness of the data? e Community Council 
e Other group 
Community Standards: Should there be e Single standard 
a Community standard for retrieval e Community guidelines 
Multiple language or DBMS's? e Multiple standards 
Retrieval e No standard 
fees hee & [Maintenance Update 4 Modification: e@ Host computer facility 
ate 25 What organization is responsible e Community Council 
Management for the maintenance required for e Contractor(s) 
Topuaye operational use of these languages/ e DODIIS/COINS 


DBMS 's? 


Multiple Language Translator: Can a e No 
multiple language translator be . e For some languages 
developed? e All languages 
Necessity: Does the Community need # None 
Data Element data element standards? e For selected areas 
Standards e For historical and new data files 
e For new data files 
Policy: Who aecides how imuch e Individual agencies ~ - caer 
standardization? e THC 
e Community Council 
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TABLE 4.1 (Cont) 


Policy Areas Specific Issues Alternative Approaches 


Data 
Standards 
(cont) 


Communica- 
tions 
Network 
| Interfaces 


Training 
and 


User Aids 


Experimenta- 


| tion and 
Research 


Approach: Given that data standards 
are required, what approach should 
be used to create standards? 


Budget Responsibilities: What organi--: 
zation is responsible for budgeting 


for Community data standards? 


Management Control: What organiza- 
tion is responsible for defining 
line protocols and gateway inter- 


faces, and ensuring exchange of 
technology? 


Maintenance: What organization is 
responsible for maintaining inter- 
face software? 


Responsibilities: What organization 
has the responsibility for training 
Community users? 


Management Responsibilities: What 
organization(s) has responsibility 
for coordinating 4 directing over- 
all experimentation §& research? 


ee 
i Bud etary Responsibilities: What or- 
' paniear ints has responsibility 


» for budgeting Lor Community experi- 
* mentation and research? 


,@ IC staff 
be THC 


e Solve technically by developing a 
cross-walk file 

e Use a committee to identify data 
element standards 

e Use a contractor to propose data 
element standards 

@ Create a new Community group (in a 
full-time capacity) to address 
data standards 


e IC staff 
e THC 
e Others (e.g., Community Council) 


e DCA 

e IHC 

e IC staff 

e Committee of Host Agencies 


| @ Host agencies 
e Contractors 
e Interagency working group 
e IHC 


je IC staff 

e DODIIS/COINS 

e IHC 

® Others (e.g., Info Science Center, CIA) 
e File sponsors 


e IHC e Community Council 
e COINS e IR&D Council 

@ ARPA 

|e IC staff 


|@ All agencies i 
|e Selected agencies | 
@ Community Councii ‘ 
e FRED Counci? ‘ 


Approved For Release 2002/07/03 : CIA-RDP83M00171R002100170001-6 


(a4 


‘ t i 1 t t t i t i i t t i 
Approved For Release 2002/07/03 : CIA-RDP83M00171R002100170001-6 


PRESEARGH iIncoRPORATED 


TABLE 4.1 (Cont) 


Policy Areas Specific Issues Alternative Approaches 


Authoritative Source: Current refer- e THC 
ence material on sécurity for ADP e IC staff 
is vague and inadequate. What e DCA 
organization is responsible for e Individual agencies 
developing an authoritative refer- @ Other Community group 


ence that defines security require- 
ments for a transmission over a 
network and data stored in computer? 


Inspection § Enforcement: What orga- e IHC 

nizational group is responsible for e IC staff 

investigating ADP hardware and soft- | e Individual agencies 

ware (i.e., data base protection, e Technical accreditation group 


valid "need-to-know" operating 


Security 
system security, etc.)? 


Research § Experimentation: What e IHC 

organization is responsible for e IC staff 

budgeting for research and experi- e DCA 

Mentation and is tasked to resolve e Individual agencies 
new problems brought on by techno- e Other Community groups 


logical developments? 


Sharing Community Data: What organi- Ic staff 
zational group is responsible for THC 


threat definition, risk clarifica- Other Community group. 
tion, and other security issues Individual agencies 
associated with the sharing of 

Community data? 
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4.4 The list of policy issues compresses to the following basic 


questions in each area: 


Policy Area 


® Shared Data Bases-- 


e Multiple Retrieval 
Languages and Data 
Base Management 
Systems-- 


8 Data Standards-- 


e Communications 
Network Inter- 
faces-- 


e Training and User 
Aids-- 


e Experimentation and 
Research-- 


Issues 


What organization(s) has the 
responsibility for Budgeting, 
ensuring proper access and 
control, and verifying the 
quality and timeliness of in- 
formation contained within 
data bases; what is to be 
shared and with whom? 


Should there be a Community 
Standard language, since this 
is a major interface problem 
to the analysts? Is it fezes- 
ible to develop and maintain 
a language translator? What 
organization is responsible 
for maintenance required for 
operational use of these re- 
trieval systems? 


Does the Community need stand- 
ards and is the Community will- 
ing to allocate the resources 
required? If so, what approach 
should be used (solve techni- 
cally, use Committee, use 
contractors, use in-house 
personnel)? 


What organization has manage- 
ment responsibility for de- 
fining communication standards 
(line protocols; gateway in- 
terfaces, etc.) and evaluating 
competing network technologies? 


What organization is responsi- 
ble for training Community 
users and what is the cost to 
the Community, and is present 
investment adequate? 


What organization has respconsi- 
bility for coordinating cverall 
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experimentation and research 
and avoiding duplication? Ry 
what means are the results 
pessed to the Community? 


e Security-- What organization is responsi- 
ble for developing an authori- 
tative reference on ADP secur- 
ity? How can an individuai 
organization's security proced- 
ures be effectively inspected 
and accredited? What are the 
multi-level compartmentation 
problems associated with ADP 
security? 


PLANNING FOR A COMMUNITY-WIDE SYSTEM 


4.5 Development of a Community-wide system is a complex process 
involving centralized direction and interagency coordination and 

planning. Some of the steps which converge on a master plan for 

developing such a system are listed below. What is contained in 

these steps, and how they relate, is illustrated in the suggested 
flow diagram, or "plan for the plan," shown in Figure 4.1. 


e Identify current information system capa- 
bilities and existing hardware configura- 


‘ tions 
e Evaluate current information handling 
capabilities 
e Study present organization of Community 


ADP elements 


e Improve management control of ADP elements 
in the Community 


e Perform top-down information requirements 


study 
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IDENTIFY CURRENT INFORMATION 
SYSTEM CAPABILITIES §& EXISTING 
HARDWARE CONFIGURATIONS 


EVALUATE CURRENT INFORMATION 
HANDLING CAPABILITIES 


—Evaluate systems with dupli- 
cative characteristics 
(including SAFE/ADISS § 
CGINS/WICSIT) 


—Identify and evaluate incon- 
sistencies and information 
gaps 

—Evaluate systems on 


—Identify cost and workload 
trends 


—Identify inventory of com- 
puter systems user agencies, 
purpose, degree of interface 
and life span 


- Identify projected replace- 
ments 


—Identify current major soft- - Timeliness ; 
ware systems ~Relevance/need C geet 
i : i -Completeness || an 
Le Aga li aeaR inae Develop dictionary -Security = Decisions 
srcvencs Cy describing hardware -Performance 
Serres —Paerform cost/benefit 
P analysis 


STUDY PRESENT ORGANIZATION 
QF COMMUNITY : 
ADP ELEMENTS I 


IDENTIFY INFORMATIONAL 
FLOW 


y, 
IDENTIFY FUNCTIONAL 
REQUIREMENTS QF 
ANALYSTS 


Each organization in 
relation to the Cammuniy 


—Management control of 
each organization 


vi 


CONDUCT POLICIES @ | 
STANDARDS REVIEW |! 


aso 


IMPROVE MANAGEMENT CONTROL y, 
OF ADP ELEMENTS [IN COMMUNITY ~— 


CONDUCT FISCAL 
REVIEW 


PERFORM TOP-DOWN 
INFORMATION REQUIREMENTS 
STUDY 


— Define new authority and 
responsibilities 


— Identify new policies 


~ Provide fiscal resources and 
staff 


-- Describe new fiscal reporting 
procedures for Community agencies 


IDENTIFY AND PROJECT 
INFORMATION NEEDS 
FOR COMMUNITY 


DEFINE AND EVALUATE 

HARDWARE AND SOFTWARE 
ALTERNATIVES FOR COMMUNITY 
1979-1985 


PREPARE AND UPDATE 
COMMUNITY ADP ACTIVITY 
MASTER PLAN 


—Community networks 


— Standard data base management 
software 


—~Security standards 
—New hardware 
—Define R&D activities 


FIGURE 4.1 
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® Define and evaluate Community hardware and 
software alternatives 


e Prepare and update Community ADP master plan. 
IMPLEMENTATION 


4.6 Currently, the DCI Intelligence Information Handling Com- 
mittee is charged with the responsibility to serve as the cata- 
lyst for bringing about Community-wide ADP planning and implemen- 
tation. The available funds, manpower, and the expertise re- 
quired to perform this crucial responsibility are not adequate 

to allow the IHC to effectively execute this stated responsibil- 
ity. Further, the Committee concept has demonstrated little 
progress in addressing the most basic Community-wide ADP prob- 
lems (i.e., data standards, security issues, etc.). 


4.7 To provide for future integration and planning efforts, it 
would be valuable to identify a central focal point to coordinate 
the development of new hardware and software systems to reduce 
redundancies and to maximize utility across the Community. At 

the same time, reporting and budgeting policies need to be changed 
to identify allocations of ADP resources, beyond the limited ac- 
countability found today. 


4.8 One approach would be to dissolve the IHC and to create a 
new "Office" with line responsibilities. This office could re- 
side within the IC Staff, or perhaps be answerable to the DCI 
directly, since ADP integration efforts are so fundamental to 
Community-wide integration as a whole. This office would be 
charged with ADP Community-wide planning and implementation and 
be the central focal point within the Community for the coordi- 
nation of new major software systems, reducing the possibility 
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of major system redundancy. As part of its responsibilities. 
the office would have budgetary authority over ADP activities 
and related Community R&D programs. This new office would re- 
solve the limited and questionable accountability for ADP re- 
source expenditure by developing and implementing new report:ng 
and budgetary policies. 
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